{"id":4183251,"url":"https://alion.io/job/emcd-security-risk-manager","title":"Security Risk Manager","company":{"id":730,"name":"EMCD","domain":"emcd.io","url":"https://alion.io/company/emcd","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Operations","role_family":"Operations","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Belgrade, Serbia"],"countries":["RS"],"hiring_countries":["RS"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-12T17:52:27Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T17:52:27Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"EMCD is a leading technology company in the crypto industry, best known as the largest mining pool in Eastern Europe. We are expanding globally and building a comprehensive ecosystem of crypto services, including payment infrastructure, custody, mining solutions and enterprise-grade tools for businesses and institutions.\nWe are looking for an Security Risk Manager to take ownership of our cyber risk management program, drive security audits and regulatory licensing initiatives.\nKey Responsibilities\nConduct information security risk assessments of partners and vendors during onboarding: prepare reports, identify risks, and record risk treatment measures in the register.\nMaintain the IS risk register: escalate to risk owners, track and control the implementation of risk treatment plans.\nRisk communication: lead risk syncs and provide risk updates for C-level executives.\nSOC 2: coordinate projects and manage the IS track of the initiative, including risk assessment (CC3) and preparation for Type 2.\nRegulatory licensing (VASP): lead the IS portion of applications, perform initial cyber risk assessments, develop cyber risk management policies and procedures, and respond to regulator inquiries.\nLead the Governance & Compliance team (2 people): planning, workload allocation, and team KPIs.\nRequirements\n4+ years of experience in Information Security Risk Management or GRC, with a significant background in fintech, crypto, or another regulated environment.\nExperience maintaining a risk register and working directly with business risk owners: assessment, treatment plans, execution control.\nPractical experience in Third-Party Risk Management (TPRM).\nKnowledge of ISO 27001/27005, NIST CSF, or SP 800-30; understanding of qualitative and quantitative risk assessment methods.\nExperience preparing for SOC 2 or ISO 27001: controls, evidence collection, and auditor engagement.\nExperience working with regulatory requirements for IS (VASP, MiCA, DORA, or equivalents).\nUnderstanding of crypto infrastructure (custody, wallets, keys, HSM) at a risk assessment level.\nAbility to prepare concise, data-driven materials with clear proposed solutions for C-level executives.\nFluent Russian and English (C1): documentation, audit collaboration, and regulatory communication.\nWhat We Offer\nRemote-first company - work from anywhere in the world.\nFully flexible working hours.\nExtended time off: 20 paid vacation days + 12 bonus days per year.\n100% paid sick leave.\nPaid English lessons (iTalki).\nProfessional growth support (courses, certifications, training programs).\nReal impact and ownership in fintech & crypto projects.\nCorporate benefits: EMCD product discounts and mining infrastructure access.\nEmployment via Service Agreement.\nApply today and help us build the future of crypto!","description_format":"text","description_chars":2795,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Russian","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Serbia","iso":"RS","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Crypto Exchanges","Crypto Wallets","Mining & Staking"],"lifecycle":[{"event":"open","at":"2026-11-12T17:52:27Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":2,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T20:19:15Z"},"pay":null,"html_url":"https://alion.io/job/emcd-security-risk-manager","json_url":"https://alion.io/job/emcd-security-risk-manager.json","meta":{"generated_at":"2026-11-12T20:19:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":42914,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":730},"rest":"https://alion.io/mcp/rest/get_company?id=730"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Femcd-security-risk-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Femcd-security-risk-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Femcd-security-risk-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/emcd-security-risk-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Femcd-security-risk-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4183251}},{"tool":"search_jobs","arguments":{"company":"emcd.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4183251},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}